S

State Street

Holds assets for institutions and runs index funds

Security Data Solutions Engineer

CybersecurityConfirmed live in the last 24 hours
Full-time$120k - $202.5k /yr

About the Job

Requirements

  • A bachelor's degree in computer science, cybersecurity, information technology, engineering, data engineering, information systems, or a related technical discipline.
  • At least 8 years of experience in cybersecurity, data engineering, AI/ML, security analytics, SIEM engineering, product design, or related technical fields.
  • At least 5 years of hands-on experience designing and implementing enterprise-scale data products, data lakes, Lakehouse, and data warehouse solutions.
  • Advanced expertise in Python, SQL, Spark, Kafka, Databricks, Snowflake, Splunk, and cloud-native data platforms for designing, building, and optimizing scalable batch and real-time data pipelines.
  • Demonstrated experience managing complex cybersecurity data integration programs and stakeholder requirements.
  • Hands-on experience with SIEM platforms and the data onboarding, normalization, and operational processes required to support them.
  • A strong understanding of data modeling, data architecture, APIs, event streaming, cloud-native services, and modern analytics platforms.
  • Familiarity with cybersecurity frameworks including NIST CSF, MITRE ATT&CK, CIS Controls, and Zero Trust architectures.
  • Industry certifications such as CISSP, CISM, CCSP, Splunk Certified Architect, Splunk Certified Consultant, Microsoft Security Certifications, AWS Certifications, Databricks Certifications, or equivalent.
  • Experience delivering cybersecurity data products within highly regulated industries such as financial services, healthcare, or critical infrastructure.
  • Experience supporting AI/ML, Security Lakehouse, Agentic AI, Security Copilot, or advanced cyber analytics initiatives.
  • Deep understanding of SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, Elastic, Chronicle, or similar technologies.
  • Proven experience designing data-driven solutions using technologies such as Databricks, Snowflake, Kafka, Spark, and logging agents such as Cribl, OpenTelemetry, FluentBit, or equivalent platforms.
  • Hands-on experience with data engineering concepts including ETL/ELT, streaming pipelines, data lakes, data warehouses, and data governance.
  • Hands-on experience developing, validating, and deploying machine learning models and scalable data pipelines in production environments.
  • Strong knowledge of cybersecurity telemetry, log management, event correlation, data normalization, enrichment, and detection engineering requirements.
  • Demonstrated product management experience developing roadmaps, prioritizing features, defining business value, and managing stakeholder expectations.
  • Experience with cloud-native architectures across AWS, Azure, and Google Cloud environments.
  • A strong understanding of cybersecurity use cases including incident response, threat detection, threat hunting, vulnerability management, identity security, and cloud security.
  • Experience working within Agile, DevSecOps, and product-driven delivery models.
  • Ability to analyze complex problems, evaluate trade-offs, and recommend pragmatic solutions balancing business and technical requirements.
  • Ability to influence technical and business leaders across multiple organizations.
  • A master's degree in computer science, cybersecurity, engineering, data science, business administration, or a related discipline.

Responsibilities

  • Serve as the subject matter expert for security data solutions supporting SIEM, security analytics, detection engineering, threat hunting, and AI-enabled cybersecurity use cases.
  • Partner with cybersecurity stakeholders to define data requirements, success criteria, onboarding priorities, roadmaps, and measurable outcomes for security data products.
  • Design and implement enterprise-scale security telemetry solutions supporting on-premises, cloud, SaaS, and hybrid environments.
  • Analyze source systems, log schemas, metadata requirements, retention needs, and downstream analytics requirements to define onboarding and normalization strategies.
  • Design workflows for onboarding security data from applications, cloud platforms, identity systems, infrastructure, network devices, databases, endpoints, and security tools.
  • Design scalable ingestion, routing, transformation, enrichment, normalization, and validation patterns for SIEM and cybersecurity data platforms.
  • Ensure security telemetry meets requirements for quality, completeness, timeliness, consistency, governance, and operational reliability.
  • Collaborate with architects, engineers, and product managers to prioritize capabilities and deliver solutions aligned with cybersecurity and business objectives.
  • Work with product managers to define product roadmaps, feature requirements, user stories, acceptance criteria, and delivery milestones for security data initiatives.
  • Lead cross-functional workshops with business and technical stakeholders to identify opportunities to improve cybersecurity visibility and operational efficiency.
  • Establish data quality metrics, service-level objectives, operational KPIs, data governance, and process governance controls for security data products.
  • Spearhead implementation of AI, automation, and self-service workflow capabilities that improve cybersecurity outcomes and reduce operational effort.
  • Influence the strategic direction of cybersecurity data platforms, data engineering processes, and analytics capabilities.
  • Provide technical leadership for complex cybersecurity data integration and modernization initiatives.

About the Company

State Street

Holds assets for institutions and runs index funds

State Street holds and services investments for pension funds, insurers, fund companies, and other large institutions, and it also runs index funds through State Street Investment Management. It launched the first US-listed exchange-traded fund, the SPDR S&P 500 ETF Trust, in 1993, and in 1924 it became custodian of the first US mutual fund. As a custody bank, it safekeeps clients' stocks and bonds, completes their trades, calculates what their funds are worth, and lends their securities to other investors. It earns fees on the assets it services and manages, plus income from currency trading and from interest on client cash. State Street traces its roots to a bank chartered in 1792 and is based in Boston, Massachusetts.

Company size
10,001+
Company stage
IPO
Headquarters
Boston, MA
Founded
1792

Recently Posted Jobs

Explore more opportunities at State Street

See more jobs